What’s Vulnerable › Vulnerabilities

CVE-2019-10194

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2019-07-11 · updated 2026-06-17
• Weakness: CWE-532

Description

Sensitive passwords used in deployment and configuration of oVirt Metrics, all versions. were found to be insufficiently protected. Passwords could be disclosed in log files (if playbooks are run with -v) or in playbooks stored on Metrics or Bastion hosts.

Affected products

• [UNKNOWN] ovirt-engine: all versions
• RedHat Virtualization Manager: 4.3

References

• http://www.securityfocus.com/bid/109140
• https://access.redhat.com/errata/RHSA-2019:2499
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10194
• http://www.securityfocus.com/bid/109140
• https://access.redhat.com/errata/RHSA-2019:2499
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10194

Get alerted when CVE-2019-10194 or the next vulnerability affects your stack